CVE-2016-6264 Integer signedness error in libc/string/arm/memset.S in uClibc and uClibc-ng before 1.0.16 allows context-dependent attackers to cause a denial of service (crash) via a negative length value to the me...
HighCVSS 7.5
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer signedness error in libc/string/arm/memset.S in uClibc and uClibc-ng before 1.0.16 allows context-dependent attackers to cause a denial of service (crash) via a negative length value to the memset function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/uclibc(Debian:12) | < 1.0.20-1 | 1.0.20-1 |
| debian/uclibc(Debian:13) | < 1.0.20-1 | 1.0.20-1 |
| debian/uclibc(Debian:14) | < 1.0.20-1 | 1.0.20-1 |
| uclibc | All versions | No fix listed |
| uclibc-ng project uclibc-ng | < 1.0.16 | 1.0.16 |
References
- Debian Security Tracker CVE-2016-6264 vendor-advisory
- [uclibc-ng-devel] 20160703 new release 1.0.16 mailing-list release-notes vendor-advisory
- [uclibc-ng-devel] 20160526 uClibc-ng and uClibc memset bug, ARM mailing-list vendor-advisory
- [oss-security] 20160729 CVE Request: uclibc-ng (and uclibc): ARM arch: code execution mailing-list patch third-party-advisory
- [oss-security] 20160720 Re: CVE Request: uclibc-ng (and uclibc): ARM arch: code execution mailing-list patch third-party-advisory
- [oss-security] 20160721 Re: CVE Request: uclibc-ng (and uclibc): ARM arch: code execution mailing-list patch third-party-advisory
- 91492 third-party-advisory vdb-entry
- bugs.debian.org issue-tracking